for the duration of account aggregation the FSP memberships are usually not obvious when service account just isn't a part of... Resolution:  If the manager attribute is current in AccountRequest (of provisioning approach), validate that the value of the attribute consists of the distinguished title with the manager as an alternative to the ident